Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202911.roa
File:                     AS202911.roa (raw, json)
Hash identifier:          KxlOfK8zMdMcLlR/PkE2D6Norx6kp8fdGJfsHY7/hkQ=
Subject key identifier:   B2:48:60:70:FD:3B:EA:DF:43:64:2B:7D:9C:52:3A:BB:C8:B7:90:E2
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       317F4CB7AAF70E8CE3777212BB77C5DF742A0424
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202911.roa
Signing time:             Mon 10 Apr 2023 03:31:48 +0000
ROA not before:           Mon 10 Apr 2023 03:26:48 +0000
ROA not after:            Mon 08 Apr 2024 03:31:48 +0000
asID:                     202911
IP address blocks:        2a12:dd47:8210::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7f:4c:b7:aa:f7:0e:8c:e3:77:72:12:bb:77:c5:df:74:2a:04:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:48 2023 GMT
            Not After : Apr  8 03:31:48 2024 GMT
        Subject: CN=B2486070FD3BEADF43642B7D9C523ABBC8B790E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:71:a7:d6:f1:ab:56:b1:4b:aa:3b:d7:b7:
                    c4:66:af:55:51:07:f8:b0:2f:f4:32:25:ed:52:4c:
                    26:00:ba:4b:12:8e:fd:f8:5e:f0:fa:2f:93:ba:bb:
                    eb:c7:54:98:70:ba:e8:b4:86:ed:c6:7d:00:7f:66:
                    3b:89:34:e1:c5:31:c4:35:50:d7:89:4f:fd:a1:96:
                    2c:2e:65:8b:ed:49:18:4d:03:5a:3d:1d:ac:f8:e8:
                    8a:0d:3e:e1:26:12:8f:ca:1d:cf:16:91:42:59:d5:
                    9f:33:40:58:40:39:80:07:33:36:1a:95:c5:14:d8:
                    9f:f2:5c:28:4a:48:56:d5:d2:dd:f3:0f:55:6d:e3:
                    c8:6f:e3:34:bb:73:95:ef:0d:91:20:48:62:02:88:
                    91:75:95:e1:2b:4b:ac:69:44:7d:8d:a7:38:4c:9d:
                    ff:28:2e:fc:d3:18:ad:46:2b:57:e3:6b:54:55:2f:
                    2e:38:b2:a3:dd:9f:a7:f0:d2:03:31:ff:25:26:56:
                    3a:9f:91:b4:c9:44:6d:b9:df:db:e6:bf:ff:4a:e0:
                    72:80:06:52:7f:ef:7c:fe:54:24:47:9a:3f:d6:d0:
                    64:06:ff:00:4f:01:b7:de:a7:94:c0:73:97:05:a9:
                    fd:65:e7:ac:62:df:40:86:8b:8a:f2:87:7c:cf:eb:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:48:60:70:FD:3B:EA:DF:43:64:2B:7D:9C:52:3A:BB:C8:B7:90:E2
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202911.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8210::/44

    Signature Algorithm: sha256WithRSAEncryption
         c7:18:d0:71:0e:31:0e:87:fe:10:f3:42:ca:e8:a8:cb:68:66:
         1f:58:07:1b:4e:3d:66:3f:df:33:ed:bf:a5:4e:9a:cc:54:28:
         35:25:2d:3b:d1:83:b4:0a:6e:2b:76:49:4f:6a:56:8e:56:2f:
         f5:8d:66:03:c2:17:fc:22:9c:55:64:80:c5:22:cd:9b:07:0e:
         30:90:8f:ab:35:76:25:47:a9:57:e1:cf:ac:b5:51:78:0a:0d:
         07:9b:7a:78:80:38:f1:7e:a5:c2:dc:12:7e:fb:66:8e:ab:ba:
         0b:6f:43:56:9f:69:4c:00:d8:7f:8f:89:b7:e6:74:37:aa:ca:
         2d:cd:b0:d0:9d:fe:07:d3:48:30:54:f4:6b:dd:8e:bd:b5:21:
         71:d7:2b:85:31:81:4b:42:39:5e:1a:94:5e:11:50:2a:9d:5e:
         a5:5f:43:af:bc:ed:21:ba:ec:58:d0:e7:17:bd:44:30:d8:c5:
         c2:c4:de:71:87:22:34:d2:5e:05:fd:f1:10:7a:1b:03:8d:ab:
         13:5f:bf:e9:65:4f:9d:7f:75:72:a1:ae:3e:d7:ce:32:b9:9f:
         a9:da:fb:bd:4f:d1:0f:36:0f:29:44:81:e8:35:d8:05:c4:1f:
         f9:55:53:31:1f:3b:6c:16:e6:ce:dd:1b:1a:22:93:76:58:62:
         ab:bf:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----